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(54) Title: UPLOAD SECURITY SCHEME 
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(57) Abstract: The need for upload security arises during content sharing between users in communication link with each other 
and a server. In one embodiment, providing the upload security involves the server identifying a mobile device that sends an upload 
message destined to a user. Providing the upload security further involves the server accessing opt-in parameters predetermined by 
the user, determining if the identity of the sending mobile device is included in the opt-in parameters, and, if so, allowing the upload 
^ to the user's account, otherwise blocking the upload. The opt-in parameters include the identity of mobile devices that are authorized 
Q by the user to upload data to the user's account. In one embodiment, the communication link includes a wireless carrier network 
^ with capability for security screening of the upload message before it reaches the server based on the identity of the wireless earner 
network. 
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UPLOAD SECURITY SCHEME 
Reference to Prior Applications 

This application claims the benefit of and incorporates by reference U.S. Patent Application 
10/934,645, entitled 'Upload Security Scheme," filed September 2, 2004, and U.S. 
5 Provisional Application 60/5 1 8,898 entitled "BACK BUTTON IN MOBILE APPLICATION," U.S. 
Provisional Application 60/5 1 8,858, entitled 'TMAVIGATION PATTERN ON A DIRECTORY TREE," 
U.S. Provisional Application 60/518,857, entitled "BACKUP AND RESTORE IN MOBILE 
APPLICATIONS," and U.S. Provisional Application 60/518,897, entitled "UPLOAD SECUmTY 
SCHEME," all of which were filed November 10, 2003. 

10 Field of the Invention 

The present invention relates generally to wireless mobile devices and more particularly to 
applications that offer upload security. Among such applications, one type is a mobile photos 
application. 

BACKGROUND 

1 5 Mobile-fiiendly technologies are advanced to provide a rich multimedia environment and 
enhance the wireless device users' experience. An outcome of fliis evolution is the manifest 
closeness between the wireless universe and tiie Internet domain, as well as the advent of 
wireless devices with multimedia capabilities. The newest versions of mobile wireless 
devices such as digital mobile phones, pagers, personal digital assistants (PDAs), handsets, 

20 and any other wireless terminals, have multimedia capabilities including the ability to retrieve 
e-mail, and push and pull information via the Internet 

One practice these capabilities allow is sharing content, such as photos. At the same time, 
there needs to be a way for managing this activity. One reason for controlling content sharing 
is security. Typically, the need for security arises firom the risk of unauthorized access to data, 
25 In the case of content sharing, the need for security arises firom the additional risk of 

unauthorized imposition., where a sender (mobile user) uploads unwanted or excess content 
for a recipient without first obtaining fhe recipient's permission. Accordingly, the present 
invention provides possible ways for addressing the risks associated with unauthorized 
imposition. 
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Summary 

The present invention is based, in part, on the observation that a need exists for upload 
security, and that it can be improved as described below. Accordingly, the upload security 
concept is implemented so as to allow content sharing without the imposition of unwanted or 
too frequent uploads. 

For the purpose of this invention, as embodied and broadly described herein, a method, a 
computer readable medium and a system are proposed as possible implementations of the 
upload security concept. These implementations typically involve a sender in communication 
link with a plurality of mobile devices. In the examples below the mobile devices are 
typically wireless devices such as wireless camera phones and the content is photograph data 
(or simply one or more photos). 

In one embodiment, a method for providing upload security, includes identifying the mobile 
device used by a sender of an upload message destined to a user, in response to the server 
receiving the upload message from the mobile device via a network. The method also 
includes accessing, in the server, opt-in parameters predetermined by the user, detennining if 
the identity of the mobile device used by the sender is included in the opt-in parameters, and 
if so, allowing upload of content from the upload message to the account associated with the 
user. Otherwise the upload is blocked. The opt-in parameters include the identity of mobile 
devices that are authorized by flie user to upload data to an account on the server associated 
with the user. In addition, optionally, the opt-in parameters include a limit number of upload 
messages which are authorized by the user during a given period, and wherein the method 
further comprises determining if the limit number for the sender is exceeded by the upload 
message such that it is not permitted by the user and thus the upload is blocked. If the upload 
is blocked, the method optionally includes rerouting the upload message to a standard email 
address of the user. 

In this embodiment, the network includes a wireless carrier network and a networking service 
which provides security screening of the upload message before it reaches the server based on 
the identity of the wireless carrier network. The identity of the wireless carrier network 
includes an internet protocol (IP) address. The identity of the wireless phone is a phone 
number assigned to it by the bearer of the wireless carrier network. In this instance, ttie IP 
address is combined with the identity of the mobile device in the upload message, such that 
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the method further includes parsing Hoe upload message to obtain the IP address and the 
identity of Hhe mobile device. 

Furflier in this method, the sender uses email as a transport mechanism for the upload 
message. The sender identifies to the server the user for whom the upload message is destined 
by indicating the user's email address. Then, the server correlates the user's email address 
with the account associated witti the user. If the capability exists, the method further includes 
establishing a communication link firom the sender's mobile device to flie user in order to 
prompt the user to indicate, on the user's mobile device or personal computer, whether the 
user wants to add the sender's mobile device identity to the opt-in parameters (in order to 
allow tiie upload). 

The approach described above can be implemented in a computer readable medium 
embodying a computer program with program code for providing the upload security. In this 
implementation, flie computer program is divided into parts, one part being at a server side, a 
second part being at a client side and a third part being at a networking service. A system for 
providing the upload security includes the server, plurality of the mobile devices and 
typically also a wireless network, the Internet and a gateway through which fte server 
communicates with the mobile devices. The server is configured with a processor and a 
memory embodying a server-side program as a portion of a computer application. The server- 
side program includes program code for causing the processor m the server to perform the 
aforementioned identifying, accessing, determining and authorizing steps, in response to the 
server receiving firom such mobile the upload message. 

As can be understood from these examples, by introducing the upload security capability to 
the system, the present invention makes the content sharing more useful, secure and user 
friendly. Such advantages will be appreciated by those of ordinary skill in the art from the 
description and practice of the invention disclosed herein. 

Brief Description of the Drawings 

The accompanying drawings, which are incorporated in and constitute a part of this 
specification, illustrate embodiments of the invention and together wifli the description serve 
to explain the principles of the invention. Wherever convenient, same or similar numbers or 
designations are used throughout the drawings to refer to the same or like elements. 
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Figure 1 shows a wireless intercoimection model using one of the many types of available 
bearer networks. 

Figure 1 A shows another model of interaction, via bearer networks, between S'^^-generation 
(3G)-enabled mobile devices and servers as well as other devices. 

Figure 2 shows a mobile phone with features associated with the present invention. 

Figure 3 illustrates the flow once users reach the Yahoo! Photos landing page. 

Figures 4A-4D show the respective PC-based and mobile device-based registration and 
application buy flow diagrams. 

Figure 5 shows flie upload opt-in process. 

Figures 6A and 6B show the screen flows for online albums and mobile albums, respectively. 

Figure 6C, parts (i) and (ii), describes setting up favorites for the mobile album slideshow. 

Figure 6D shows flow diagrams for photos view, share and save. 

Figure 6E illustrates the flow of restoring the mobile album from the server backup. 

Figure 7 provides a simplified diagram to illustrate flie back button feature. 

Figures 8A-C illustrate details of the upload security scheme. The diagram in Figure 8A 
shows the various system components' position in the upload security scheme, and the flow 
diagram in Figures 8B-C illustrate various aspects of the process. 

Detailed Description of the Invention 

The present invention contemplates upload security and implementation of this concept in 
mobile applications. One such application is mobile photos, an example of which is referred 
to as the Yahoo! Photos™ application. Yahoo! and Yahoo! Photos are trademarks of Yahoo! 
Inc., Sunnyvale, California. Any other trademarks are the property, of their respective holders. 

Although it can be implemented in various applications, for clarity and for illustration, the 
approach contemplated by the present invention is described here in the context of the 
Yahoo! Photos application. The server side of this application is the "server Yahoo! Photos," 
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and the client side of this application is the mobile client application, or **client Yahoo! 
Photos." A client application is generally considered to be a downloadable application; 
namely, J2ME™ (Java™ 2 platform, Micro Edition, by Sun Microsystems, Inc.), Yahoo! 
Photos™, or any other application that is downloadable to the mobile device. In flie example 
5 here, the client Yahoo! Photos runs on a mobile phone, and more specifically, a mobile 
camera phone. 

The Wireless Communication Environment 

A. Wireless CoMMLJNiCATioN Protocols 

Wireless protocols, the standards which govern communications of data between wireless 
10 devices and the Intemet, utilize and support the enhanced capabilities of modem mobile 

wireless devices and Intemet content technologies. Hypertext transfer protocol (HTTP) is an 
often used standard, and other standards include the Wureless Application Protocol (WAP), 
M-services, i-Mode and Web clipping. Although other protocols are also possible, WAP 
appears to provide a proper framework for the content sharing. Therefore, adoption of 
1 5 standards such as WAP is suitable for the purpose of the present invention, and it is discussed 
in some detail below. 

The adoption of WAP builds on existing Intemet standards and protocols adapted for use in 
wireless communication networks and addresses the unique characteristics of mobile wireless 
devices (with limited computing, memory, display, user interface, and power capabilities). 

20 WAP is a specification suite defining a set of protocols for presentation and delivery of 
wireless information and telephony services on mobile wireless devices. WAP services 
provide information access and delivery to WAP-enabled devices. WAP was designed to 
empower users with easy and instant access to information and interactive services. Thus, 
interoperability between WAP-enabled device is possible through any WAP-compliant 

25 infrastructure to deliver timely information and accept transaction and queries. 

WAP can be built on any operating system, including PalmOS, EPOC, Windows CE, 
FLEXOS, OS/9, JAVA OS etc. Being air interface independent, WAP is designed to be 
scalable to new networks as they develop, allowing bearer independence and development of 
common solutions across dispamte networks. 



wo 2005/048073 PCTAJS2004/037662 

The term "WAP" is commonly used to refer to the wireless application environment (WAE) 
although it is WAE that includes the WAP suit of protocols and technologies. WAE provides 
the rich application environment which enables delivery of information and interactive 
services to mobile wireless devices. An important aspect of the WAE is the WAP stack, 
namely the wkeless protocol layers, as shown for example in Figure 1 . At the bottom of the 
WAP stack 1 1 is a network layer, topped by Ihe transport layer, flie security layer, the 
transaction layer, and the session layer. 

Briefly, the network protocol layer supports network interface definitions, governing 
interface with the networks of wireless service providers (wireless bearers) such as short 
message service (SMS), code division multiple access (CDMA), cellular digital packet data 
(CDPD), general packet radio service (GPRS), high speed curcuit-switched data (HSCSD), 
third generation (3G), GSM (global system for mobile communications), and unstructured 
supplementary service data (USSD) channel. The wureless transport layer supports the 
wireless datagram protocol (WDP), and when operatmg over an IP (Internet protocol) 
network layer WDP is replaced with user datagram protocol/IP (UDP/IP). WDP offers to the 
upper protocol layers a datagram service and transparent communication over the underlying 
bearer services. In other words, WDP offers to the upper protocol layers a common interface 
to and ability to function independent of the type of bearer wireless network. The wireless 
transport layer security (WTLS) provides a secure transport service to preserve the privacy, 
authentication and data integrity of the transport service at the layer below, as well as the 
ability to create and terminate secure connections between communicating applications. The 
transaction protocol (WTP) layer provides transaction oriented protocol for the WAP 
datagram service, including, for example, request-response transactions. The wireless session 
protocol (WSP) layer provides HTTP/1.1 functionality and features such as session 
suspend/resume. The WSP provides the upper-level application lever of the WAE with an 
interface to connection and connectionless services operating above the transaction protocol 
and the datagram transport layers, respectively. 

The WAE (i.e., the wireless application environment) is further fashioned with a wireless 
markup language (WML) micro-browser, a WML script virtual machine, a WML script 
standard library, a wireless telephony application interface (TAl), and WAP content types. 
The WAP micro-browser, also referred to as flie "WAP browser," fiicililates interaction 
between WAP/Web applications and WAP-enabled devices. The micro-browser is a tag- 
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based wireless browser application supporting wireless markup language (WML), and 
extensible transport hyperlink markup language pCTHML), The micro-browser uses the 
"card" metaphor for user interface, where user interactions are split into cards. The WAP card 
metaphor provides a common interface to which all applications can conform, much like the 
5 desktop metaphor in PCs. The micro-browser supports user actions, defined at tree levels 
(deck, card, and select & link options, i.e., ACCEPT, PREY, etc.) and defauh tasks (PREY, NOOP, 
etc.). For example, a deck of cards is split into a navigation card, variables card, and input 
elements card. A navigation card is formed as a script encapsulated with the 'card' tags. The 
foUowmg example of a card includes the type of interaction (dotype="accept") and link (go 

10 URL="#eCARD"). 

<CAia» 

<D0 TYP&="ACCEPT"> 
<G0 URL="#eCARD"/> 
</D0 

WELCOMEl 
<yCARD> 



B. Wireless Communication Infrastructure 

Figure 1 shows a wireless interconnection model 10 using one of the many types of available 
bearer networks 12. The illustrated wireless mobile devices 100 are presumed to have 
sufficient local memory and Internet access capability to allow a user to download programs 

15 from servers 1 8 through the Internet 16 (and any other network such as LAN, WAN or 
Ethernet network) and store them in the local memory. Thus, wireless subscribers can gain 
fast access to content in these or other servers via flie latemet througji various downloadable 
applications. Note that the illustrated server 18 can be the origin of downloadable programs 
as well as the origin, or destination, of content; although programs and content can origmate 

20 at or be destined for different servers. For the purpose of tins illustration, the web server 1 8 is 
the source of the Yahoo! Photos client side application as well as the source, and destination, 
of content, particularly photos (image data). Using the downloaded program, such as Yahoo! 
Photos, and with multimedia capabilities, including the ability to retrieve e-mail, and push 
and pull information via the Intemet, network operators (or, more generally, service 

25 providers) add value propositions beyond voice or text offerings. 

Indeed, with fliis capability, users can capture photo images in their mobile devices, store and 
manipulate the captured images, and upload data of the captured images to a server (e.g.. 
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server 18). Thus, the server 18 operates as a repository for the data of photo images, and users 
can download from flie server to their mobile devices data of previously captured photo 
images, as well as store and manipulate such images. Photos resident on one mobile device 
can be shared with another via the server 18 and the communication network(s) 12 and 16. 

In this wireless interconnect model, the mobile phones used to download the Yahoo! Photos 
client side program are WAP-enabled. As shown in Figure 1, the WAP-enabled devices 100 
support the WAP protocol and the server 1 8 typically supports the WWW (world-wide web) 
protocol. In particular, the wireless application envirormient at the mobile device side 1 1 
includes the micro-browser, a suite of WAP protocols at the network through session layers, 
and the downloadable (client-side) Yahoo! Photos application program. The micro-browser 
defines how WML documents and WML script applets should be interpreted and presented to 
the mobile device user. The Micro-browser's WTA (wireless telephone application) 
functionality provides call control, phone book access and messaging within WML script 
applets to allow selective call forwarding or other secure telephony. The wireless application 
environment at the server side 13 includes tiie server-side Yahoo! Photos in addition to a 
standard web browser and WWW protocol stack (HTTP and TCP/IP). 

To enable web-based access to content, service providers deploy wireless data through the 
carrier network 12 while controlling the data communications to their subscribers and 
tracking the billable activity. Typically, the gateway 14 is tasked with tracking subscriber 
activities, controlling access and, m addition, functioning as the proxy for the mobile device 
100, on the one hand, and for the server 1 8, on the other hand. The gateway 14 is 
implemented, building on standard web proxy technology, to interconnect the services 
offered by the wireless service providers to the HTTP protocol so as to permit access to 
content on the wired Internet. 

One model of interaction between a WAP-enabled device, the WAP-enabled proxy/gateway, 
and the server, is the Hypertext Transfer Protocol (HTTP) 1 . 1 response/request transaction, 
where HTTP LI is profiled for the wireless environment. The gateway (13 & 14) translates 
requests from the WAP protocol to the WWW protocol, and vice versa; translating 
WML(/HTML) documents to HTML(/WML), resolving domain names in URLs and 
providing a control point for managing access. From the WAP-enabled gateway with 
encoders/decoders, the URL requests or WML documents (possibly in encoded form) can be 
sent encoded/decoded to add security to the user interaction. Note that, unlike the flat 
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Structure of HTML documents, WML documents are divided into a set of user interaction 
units, namely a deck of cards. Each user interaction unit is a card (or page), and the user can 
navigate between cards in one or more WML documents. 

Another model of interaction between a WAP-enabled device, the WAP-enabled 
proxy/gateway, and the server, is the HTTP response/request transaction (protocol running on 
top of the Intemet's TCP/IP suite of protocols). This model is appropriate for the newer WAP 
2.0 (with protocol stack not shown in Figure 1). Unlike Hhe above-mentioned, and illustrated, 
WAP stack 11, WAP 2.0 stack includes the IP, TCP (transmission control protocol), TLS, 
HTTP and WAE layers atop the network layer (all of which are profiled for wireless 
environment). For example, ttie wireless profile for the. TLS protocol will permit 
interoperability for secure transactions. 

Yet another model of interaction via bearer networks, between 3"^-generation (3G)-enabled 
mobile devices and servers or oflier devices, is shown in Figure 1 A. As shown, a 3G termmal 
supports higher-speed, wider-band wireless cellular service communications based on various 
technologies, including wide code division multiple access (W-CDMA), general packet radio 
service (GPRS), global system for mobile communications (GSM), enhanced data rates for 
global evolution (EDGE), unified threat management system (UMTS), and high speed circuit 
switched data (HSCSD). A 3G terminal is equipped wifli cordless connections for local, short 
distance communications. The communication protocols in the 3G terminal are comparable to 
the open system interconnection (OSI) protocols, layered in the OSI stack. 

Various services are supported by these protocols, including web browsing, short message 
service (SMS), multimedia messaging service (MMS), e-mail, M-commerce, real-time video, 
and pre-paid. The MMS, for example, is a store and forward messaging service capable of 
adding multimedia elements to SMS, including unages, text, audio clips, and video clips. 
MMS is synchronized across a common timeline, rather than being discrete like e-mail and 
SMS; it is akin to a presentation layer over e-mail and looking like a slide show with images. 
On a compatible phone, the MMS message will appear with a new message alert. The picture 
message will open on the screen, the text will appear below the image and the sound will 
begin to play automatically. 

Downloadable applications such as Yahoo! Photos and network games are likewise supported 
in the 3G terminal and interact with services such as MMS. The originator can easily create a 
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multimedia message, either using a built-in or accessory camera, or can use images and 
sounds stored previously in the phone (and possibly downloaded from a web site). However, 
for simplicity, the following description assumes that the mobile device is a WAP-enabled 
camera phone used for downloading photo applications such as the Yahoo! Photos. 

Figure 2 shows a mobile phone 100, not necessarily associated with any particular 
manufacturer, but with features suitable for the purpose of the present invention. For 
example, to accommodate the Yahoo! Photos application, the mobile phone 100 has a camera 
feature with the camera lens 1 12 exposed for capturing images. The mobile phone 100 also 
has a 5-point navigation key (also called game key) 1 14, and it features left, right, up, down 
and selection, or *0K,' fimctions, substantially mimicking the operations of a mouse. The 
main menu button 1 16 activates the menu display on the screen, and the main OK button 1 1 8 
activates a menu selection. The 'back* button 1 10 is shown as a hardware key whose position 
here is merely exemplary. Namely, the physical placement of the 'back' button is device 
dependent, where it is anticipated that buttons on different devices may be arranged 
differently. A 'back' soft-key is possible to implement a 'back' function of the WAP browser, 
which means that it would show up as an icon or menu item on the screen of the mobile 
phone. 

As further shown in Figure 2, the Yahool-enabled phone 100 supports wireless cellular 
service communications based on various technologies such as the GPRS and GSM. This 
device is configured for supporting WAP communication protocols (at all layers of the WAP 
stack). Various services shown as being supported by these protocols, include web browsing, 
SMS, MMS, e-mail, M-conmierce, real-time video, and pre-paid. The downloadable 
programs shown to interact with such services mclude tiie network games and Yahoo! 
Photos. 

The mobile device functionality is preferably implemented using a platform, such as the 
J2ME™ platform, which is tailored for a broad range of embedded devices including mobile 
phones. The J2ME™ platform includes a set of standard Java APIs (application programming 
Interface), and provides a user interface, a security model, built-in network protocols (e.g., 
WAP, as shown in Figure 1), and support for networked and disconnected applications 
(Y ahoo! Photos is a networked application). 
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With the J2METM platfonn, applications are written once for a wide range of device. 
Applications leveraging each device's native capabilities are then downloaded dynamically. 
The J2ME™ platfonn defines configurations, profiles and optional packages as elements for 
building complete Java run time environments. Configurations are composed of a virtual 
machine and a minimal set of class libraries and provide the base functionality for a particular 
range of devices that share similar characteristics. Current configurations include connected 
limited device configuration (CLDC) for devices with limited memory and processing 
capabilities (e.g., mobile phones, two-way pagers, and PDAs) and connected device 
configuration (CDC) for devices with better memory, processing and network bandwidth 
capabilities (e.g., TV set-top boxes, residential gateways, in-vehicle telematics systems, and 
hi-end PDAs). However, in order to provide a complete runtime environment targeted at 
specific device categories, the configurations must be combined with a set of the high-level 
APIs, or profiles, that further define the application life cycle model, access to device-specific 
properties, and user interface. 

One example of profiles is flie mobile information device profile (MIDP) which is designed 
for mobile phones and entry-level PDAs. MIDP offers a core application functionality 
required by mobile applications, including user interface, network connectivity, local data 
storage, and application management. The J2ME™ can be further extended by combining 
various optional packages and their corresponding profiles to address specific market 
requirements, e.g., Bluetooth™, web services, wireless messaging, multimedia, and database 
connectivity. 

THE Upload Security in the Context of Mobile Yahoo! Photos 

Note that the example here focuses on the camera phone, but the principles of the present 
invention are not limited to camera phones. Any phone or other wireless mobile device can 
embody a variation of the present invention. When the mobile device is a smart handset, 
downloading application programs and implementing the upload security scheme are possible 
even though the communications wifli the service provider may be different in character. 

It should be mentioned that, although the manufacturer provides the Yahoo [-enabled phone 
100 with camera functionality - i.e., fimctionality for capturing images, and saving, 
displaying, manipulating, transmitting and receiving data of image - this camera 
fimctionality is independent fi:om the Yahoo! Photos program. That is, data of the captured 
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images reside in the mobile phone outside the Yahoo! Photos environment until such time 
that this data is introduced to the Yahoo! Photos environment by being first uploaded to the 
Yahool server and then downloaded to the local (mobile) Yahoo! Photos album, as will be 
later explained. 

On mobile devices, various client application programs are offered to the user on a default 
start-up or main menu screen or on a manufacturer-installed virtual vending machine screen. 
Other selection items include, for example, the menu item for setting the sound. These start 
up and vending screens show a menu with a list (or icons) of applications which the user can 
obtain by following an install procedure. The menu provides links to various service web 
sites, including, for example, the Yahoo! Photos site. The links, of course, are URLs 
(Uniform Resource Locator) - i.e., the world wide web address of a site on the Intemet, and 
on the Yahoo!-enabled phone, at least one such menu item is the link for downloading the 
Yahoo! Photos application. 

Figure 3 illustrates the flow once users reach the mobile application site, which, in this 
example, is the Yahoo! Photos landing page. The URL for the landing page is obtained via a 
link from a promotional web page, through a web search, or from a bookmark (or favorites). 
The flow is shown as originating on a user's PC (personal computer) and it commences with 
program information presented at the landing page 302 on the PC display. The contents 303 
and 304 of the landing page is presented to show the options available to the user based on 
whether or not the user has ateady purchased the Yahoo! Photos program. For instance, the 
landing page presents to the user the Yahoo! Photos program name with the option of "how 
to get it now" 304, as well as upload information 306a, flash demo 306b, and pricing 
information 306d, say, "$2.99 monthly." To buy the application the user clicks on the 
application name, Yahoo! Photos, or on "how to get it now." Subsequent to the registration 
400a-d, a query (such as "would you like to buy it for $2.99?") prompts the user to 
accept/reject the offer 320. Then, for the purpose of implementing upload security, flie user is 
prompted to establish upload opt-in parameters 500, as will be later explained. 

If the user accepts the offer to buy tiie application, the order is confirmed 322 and the 
application is downloaded into the mobile phone, becoming resident on the mobile phone. 
Figures 4A-4D show the respective PC-based and mobile-based registration and buy flow 
diagrams. 



wo 2005/048073 



PCT/US2004/037662 



Incidentally, as shown in Figures 3 and 4A, if the user confirms acceptance, assuming the 
user has an accoxmt on the server having signed in before, the user is prompted to provide the 
telephone number of the mobile phone. With that phone number, the server sends a short 
message embedded with a link to the mobile phone and causes the mobile phone to vibrate 
or, otherwise, signals the user with a message requesting confirmation of the purchase 326. 
With this confirmation 426 the server proceeds to send the program to the mobile phone. 

As shown in Figures 4B and 4C, registration can originate on the PC or .tihe mobile phone. In 
the PC-based registration process, once, the compatible phone list is reviewed 450 and the 
phone is deemed compatible, registration can go forward starting with the user entering the 
10-digit mobile phone number 452, The service provider dials the 10-digit phone number and 
requests confirmation from the user via that mobile phone 456. The user is also prompted to 
follow the buy instructions 460 or follow the link to the vending machine 458. Once flie 
download takes place the Yahoo! Photos client home page 268 is presented on the mobile 
screen. Alternatively, rather than indirectly via the PC, a program such as Yahoo! Photos can 
be purchased directly via the mobile phone, as shown in Figure 4C. That is, the, registration 
process originating from the mobile phone is launched from the menu page, e.g. Yahoo! 
home pages 470 or 472. Beyond that, the link to (virtual) vendor machine page 462, 
download page 464, confirmation page 466 and home page 468 are similar to those in Figure 
4B. 

Figure 4D shows a first-time purchase flow. As can be seen, the purchase can originate either 
at the PC or the mobile phone, starting with the respective landing page. Note that in the PC- 
based process the landing page 480 is obtained via a standard browser. In the mobile-based 
process, the landing page 482 presents the WAP sites, assuming the mobile phone is WAP 
compliant and uses the micro-browser for linking to this and subsequent pages. Then, for a 
fiarst time purchaser the product information (i.e. Yahoo! Photos application) is introduced 
along with price and links to terms of use and buy/cancel selection buttons (icons) 486. 
Download activation 488, progress update 490 and confirmation 492 are provided along the 
way when the application is loaded. The application is then ready to launch on exiting the 
micro-browser 494. After being invoked, the home page of Yahoo! Photos is displayed 498. 

For implementing upload security, as mentioned above, the registration and buy process of 
Figure 3 includes setting the upload opt-in 500 parameters. Figure 5 shows an upload opt-in 
process 500 for settmg the user's upload parameters that establish the user's upload 
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preferences (once the upload opt-in module is invoked 502). Preferably at the PC, the user is 
prompted to enter the service provider-issued phone numbers of mobile phones authorized by 
flie user to upload their photos to the user's Yahoo! Photos account (on the server) 506. The 
user is additionally prompted to enter one or more of the user's e-mails, e.g., <user reg. 
5 #@messaging.sprintPCS> or other e-mails, e.g., <jsmith@sprintpcs.com>, through which the 
photos are uploaded to the user account 506. The e-mails are posted on the approved list. 
Although it is not shown, the user can additionally pre-select the maximum number of upload 
messages the user wants to receive in a day (or any other predefined period of time). At the 
end of this selection process the user is prompted to confirm the entries 508 before they are 
1 0 stored in the database for future reference. 

Orice the Yahoo! Photos program is resident on the mobile phone it can be invoked from the 
landing page or menu page (using the menu button on the phone to bring up the menu or 
using the default menu if Yahoo! Photos is presented as one of the default menu options). 
Invocation of the Yahoo! Photos application allows, among others, user access and 
15 manipulation of the user's mobile album as well as online albums in the user accoimt. Figures 
6A and 6B show the screen flows for online albums and mobile albums, respectively. 

Invocation of Yahoo! Photos prompts this program to display the *home' page 2.0 with two 
main options: mobile album, and online album (as shown in Figures 6A and 6B). The mobile 
album is an album of photos stored locally on the mobile phone, so that the user need not go 

20 out over the network to obtain them. The online album4s an album of photos stored on the 
server in the user's account. As mentioned before, photo images can be captured and 
manipulated by the mobile phone outside the Yahoo! Photos environment. These photo 
images will not be available at the mobile or online albums until they are uploaded to the 
server, stored in the online album and then (selectively or in batch) downloaded to the mobile 

25 album, and vice versa. Accordingly, selecting *online album' allows the user to access and 
manipulate photo images that have already been uploaded to the server from the user's PC or 
mobile phone and stored in the online album. Likewise, selecting 'mobile album* allows the 
user to access and manipulate photo images that have been already downloaded from the 
server into the mobile album. 

30 Then, if the 'online album' option is selected from the Yahoo! Photos client program 'home' 
page (2.0), as shown in Figure 6A, it prompts the program to display the next page which is 
the *sign-in' page (1.0). It requires the user to follow a sign-in procedure that typically 
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includes providing a Yahoo! ID and user password. The sign-in procedure will, among 
others, bring up the user's account and relate it to the user's online albums. That is, the sign- 
in procedure allows the user to access his account via the Internet (and other proprietary 
network if applicable). 

The next page is the 'my online albums' page (2.1). For the specific user, this online albums 
page lists the names of photo albums available to the named user which are associated with 
flie user's account Of course, only albums that are on the server are listed, and if the selected 
album is empty the next page will display an indication to that effect (i.e., "this album is 
currently etdpty" at page; 2.1.6). Alternatively, if the album is not empty, selectmg that 
album will bring up the next page, the 'photo list' page for that album (2.1.2). In the 'photo 
list' page, a photo can be selected for downloading it from the server onto the mobile phone. 
Additionally, a selected photo can be opened or other actions can be invoked in relation to it. 
The other actions are presented in a menu that is shown on the screen as a pull-down menu, 
pop-up menu, or a menu superimposed on any part of the current page (in this example the 
menu is shown as a pull-down menu). 

Such menu (hereafter '*photo options menu") provides a number of selection items, each of 
each representing an action, including: 'save to mobile,' *email photo,' 'screen saver,' 
'thumbnails,' 'online albums,' and *home.' Each selection brings up a page that corresponds 
to the selected action item. Two of the action items have ahready been discussed above, 
'home' and 'online album.' Selecting home, will lead the user back to the home page (2.0), 
and selecting online album, will lead the user to the aforementioned 'my online albums' page 
(2.1). 

Selecting 'thumbnails' brings up a 'photo thumbs' page 2.1.1 that shows a group of 
thumbnail photo images from the selected album. Note that the number of photo thumb 
groups downloaded from the server depends on the memory size of the mobile phone (or 
whatever device is used). With this feature, the user can then thumbnail through the groups of 
photos in the album. The groups of thumbnail photo images in this album are each loaded 
from the server. The user can then move between the images back and forth (scroll back and 
forth) and select any one of the photos in the 'thumbnails' page, A selected thumbnail image 
will be enlarged in the next page, the 'online photo' page (2. 1 .3). 
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As can be seen, each of the pages, *photo list' (2.1.2), •photo thumbs' (2.1.1), and •online 
photo' (2.1.3), includes the photo options menu feature. Among these action items, when 
•save to mobile' is invoked from flie •photo list' page, •photo thumbs' page, or 'online photo' 
page, it causes the selected photo image (previously downloaded from the server) to be saved 
5 in the mobile album on the mobile phone. The 'added to mobile' page (2. 1 .7) is brought up in 
this case to show the photo being saved and to give an indication that saving is done. 

When 'email photo' action is mvoked, the 'share as email' page comes up (2.1.5). This page 
shows the photo(s) selected for emailing and prompts the user for the email address. In this 
implementation, a number of recentiy-used email addresses are provided. Incidentally, 

1 0 'email' is simply a transport mechanism which is presently used to send photos from camera 
phones. Other transport mechanisms may be developed and employed for this application. 
Then, when the photo is emailed from the mobile phone to the selected e-mail address, a 
message pops up indicating that the email has been sent or, if not, that an error occurred. For 
example, a transmission will fail if the user is not authorized to upload photos to the selected 

1 5 e-mail. An error message of this kind is a product of the upload security scheme 

contemplated by the present invention, as embodied in the Yahoo! Photos application 
program. More details on the upload security are provided below with reference to Figures 8 
and 9. 

When the 'screen saver' action is invoked, the selected photo will be used to populate the 
20 screen when the phone is idle, standing by, or starting up. The 'screen saver' option is 

associated with screen saver page (2. 1 .4) which shows the selected photo and requires the 
user to select 'OK' or 'cancel' to add this photo to the screen saver photo roster. A message 
pops up to indicate the status of the photo download. 

Going back to the mobile album is possible with the photo options menu via ttie 'home' page, 
25 using tiie 'home' option as discussed above. Another way for getting to the mobile album or 
any other previous page is with the "back" action using the 'back' button, as will be later 
explained. Also, as mentioned above, when the Yahoo! Photos application is invoked from 
the landing/menu page, the 'home' page (2.0) presents the 'mobile album' as one of the 
selection items. Accordingly, the mobile album can be directly accessed via the 'home' page. 

30 The mobile album screen flow, shown in Figure 6B, starts with the 'home' page (2.0) and 
selection of the mobile album brings up the 'mobile photo' list page (3.1.1). This page 
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presents two action menus, 'open' and 'action.* Thus, selection of any of the listed photos can 
be followed by selecting 'open' or 'action.' As before, when 'open' is selected the photo is 
shown on the screen in the 'photo thumbs' page (3.1.2). When 'actions' is selected, a mobile 
photo action menu is provided. This menu includes action items such as 'slide show,' 'move,' 
5 'delete photo,' 'delete all' photos), 'thumbnails,' 'history,' and 'home.' 

Except for the photos being local (at the mobile album), the thumbnails feature, associated 
with the 'photo thumbs' page (3.1 .2), works as described above with reference to the online 
album. A photo selected on the mobile 'photo thumbs' page can be enlarged as shown in the 
next page, the 'mobile photo' page (3.1.3). The menu for the 'photo thumbs' and 'mobile 
10 photo' pages includes a subset of the aforementioned mobile photo action menu. 

When the slide show is invoked from such a menu the 'mobile slide show' page comes up 
(3.3). While this feature is active, the slide show will scroll through the mobile albimi photos, 
showing each photo for a certain period. The slide show will go on until the user selects 
'stop' on the bottom of the page. If the user selects 'actions' a slide show menu gives the user 
15 the options of 'pause,' 'show,' 'normal,' and 'fast.' The 'pause' option is selected for 

pausing the slide show; 'slow' will slow down the slide show, 'speed' will speed up the slide 
show, and 'normal' will bring it to normal speed. (Figure 6C, parts (i) and (ii), describes 
setting up favorites for the mobile album slideshow; part (i) describes the process in the 
mobile device, and part (ii) describes flie process originating at the PC). 

20 As further shown in Figure 6B, the 'move' page comes up (3.2.1) when the 'move' action 
(referred to also as 'rearrange' action) is selected from any one of the three pages (3.1.1, 3.1.2 
and 3.1.3). In this page, the program displays a group of photos (thxmibnails) and flie user can 
rearrange the photos using the 5-point navigation key, as well as choose to drop a photo or 
save it (Figure 6D shows flow diagrams for photos view, share and save). When the 'delete' 

25 or 'delete all' actions are selected, the user has the option of deleting or canceling the delete 

' action (as shown in pages 3.2.5 and 3.2.4). The 'delete' page shows the photo selected for 
deletion to allow the user to change their mind. When all the photos are deleted, or when the 
mobile album is empty to begin with, the 'mobile album empty' page is displayed (3.1.4). It 
allows the user to select the home page or select the answer to any one of the queries, such as 

30 "where are my photos?" and "what is the mobile album?." Selection of the latter will bring up 
flie 'about' page (3.1.4.1), and in this page pressing 'OK' provides user access to the online 
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albuin(s). Selection of the former brings up the 'restore album' page 3.1.4.2. The "restore*' 
function is explained in more detail below. 

Note that, when the user signs in, the server associates the user's identification with his 
historical record so that the application program can record (backup) the photo in the server 
5 each time the user saves a photo to the mobile album. This historical record serves as a 
backup that allows the user to restore his album if the Yahoo! Photos program is erased, for 
any reason, from the mobile phone memory and the user then reloads this program. This 
history feature is useful to reduce the navigation for restoring the mobile album since the 
server maintains this information in the user's client account. 

10 It is important to note that although the history feature is described in the context of the 
Yahoo! Photos program, it is useful in any mobile device application where backup is 
desired. Thus, although this feature is implemented for the Yahoo! Photos application, it can 
be implemented more generically for other applications. 

In the Yahoo! Photos context, every photo from the user's online album that is saved to the 
15 mobile album is ^remembered' by the server. Preferably, since the page traversal path is not 
predictive the history is recorded accurately and fully. This is made possible with the 
association of the user's Yahoo! ID to a user's historical record on the server that records all 
photos saved by the user to the mobile album. Moreover, since each mobile phone device is 
distinct, and a user may have more than one device, each device can in principle have its own 
20 distinct historical record. However, it can be arranged when the user first establishes or later 
updates his account that the user's Yahoo! ID is associated with a plurality of mobile phones 
and, upon signing in, the user can have access to his historical record firom any one of tiiese 
mobile phones. Thus, in a situation where the Yahoo! Photos program is deleted somehow or 
photos in the mobile album are erased for some reason the historical record provides a mobile 
25 album backup for restoring that album. 

To that end, when the user reloads the application, it vsdll query the user as to wheflier the 
user wishes to restore any of the mobile album photos. That is, when the user selects the 
query "where are my photos?" (in page 3.1.4) the ^restore album' page is displayed (3.1.4.2). 
As witii the previous page (3.1.4), this page allows tiie user to go to the *home' page (2.0) 
30 and, tins time via *OK', it allows the user to go to the next mobile ^restore album' page 
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(3.1.4.2.1) for a historical photo download list (of photos previously downloaded to the 

t 

mobile phone). 

Figure 6E illustrates in more detail the flow of restoring the mobile album from the server 
backup. Specifically, after traversing the 'home' and *mobile album empty' pages (2.0 and 
5 3.1.4), the user lends on the 'restore album* page (3.1.4.2). On selecting the 'OK' option, if 
the user is logged in fhe Yahoo! Photos server responds with the download history list of 
photos (steps 33, 35). This response prompts the mobile device to bring up the 'restore 
album' page (3.1.4.2.1) with the download history list of, say, 20 last photos that were added 
to the mobile album. From this historical list, the photos can be picked {see^ e.g., 
10 checkmarks) and then the selected photos can be restored to the mobile album using the 
save/cancel menu options. The selected photos are then downloaded from tiie server in a 
batch process (step 37). The mobile album is then available for user access via 'mobile 
album' page (3.1.1). 

Note that the pages shown in Figures 6A-6E and discussed herein are exemplary rather than 
1 S exhaustive, and they do not necessarily include all possible pages (or user interaction cards) 
that a photo application such as Yahoo! Photos presents. Moreover, the reference 
designations (call-out numbers) typically refer to the pages themselves rather than any 
portion of their content. Where applicable, similar pages appear in different figures with the 
same call-out nimabers, e.g., home page 2.0, although their respective contents can vary 
20 slightly. 

As to navigating through the pages on the mobile phone, tiie pages can be traversed forward 
as described above and they can be traversed backwards using the **back button" feature. 
Figure 7 provides a simpHfied diagram to illustrate the "back button" feature. As can be seen, 
the "back a level" mode allows hierarchical backwards sequence traversal one level each time 

25 the 'back' button is touch activated or clicked (hereafter "clicked"). The "back in sequence" 
mode allows sequential backwards one page each time the 'back' button is pressed. For 
example, in back a level mode, back a level takes the application from a photo page (e.g., 6) 
one level up to the list of photos page (3); and from there one more level up to the Kst of 
albums page (2) and one more level up to the home page (1). As can be further seen in this 

30 example, the back in sequence mode Amotions to take the application from the current phott^ 
page (6) to the former photo page (5), rather than up one level (3), when the back button is 
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touched. Additional activations of the back button will traverse through all the pages in 
reverse sequence. 

It makes no difference if the "back button" feature is used while in the online album or 
mobile album part of the application. The principles apply equally well to both situations. 
5 Either way, the steps (pages traversed) are remembered, and they can be recorded server side, 
locally, or both on the server side and locally. 

Having mentioned it in the above overview of the Yahoo! Photos appHcation, we turn again 
to upload security for a more detailed description of this scheme in the context of Yahoo! 
Photos. As indicated, the idea is to provide a new scheme for uploading photos to online 

10 accounts in a secure manner so as to prevent spam and unauthorized uploading. At the outset, 
the upload security scheme involves an opt-in process (500 in Figures 3 and 5) which 
prompts the Yahoo! Photos user to pre register phone numbers of camera phones Hmt will be 
authorized to upload to the user's Yahoo! Photos account For each phone authorized, the 
user can also pre-select the maximum number of upload messages the user wants to receive 

15 in a day (or any other predefined period of time). At the end of this selection process the 
phone number, the carrier, and the message limit are stored in the database for future 
reference. At any point subsequent to the opt-in phase, when an email photo upload to a 
Yahoo! Photos user account is conducted from any camera phone, the upload security scheme, 
refers to the user's predetermined upload parameters for authorization of the photo upload via 

20 that email. In particular, when the *email photo' action is invoked by a user, the *share as 

email' page (2.1.5) comes up on the user's mobile device and shows the photo(s) selected for 
emailing. The page also prompts the user for an email address for the upload. 

In one possible implementation, a number of recently-used destination email addresses are 
provided. The user can select one of these emails or enter a new destination email address. 
25 The user will send the photo to that address, provided however that the user is allowed to 
upload photos to that destination user's Yahoo! Photos account. 

. Figures 8A-C show the upload security scheme when a photo is destined to Yahoo! Photos 
upload e-mail servers . The diagram in Figure 8A shows the various system components' 
position in the upload security scheme, and the flow diagram in Figures 8B-C illustrate 
30 various aspects of the process, including upload rules. Although the example is shown with 
some details it is intended merely to convey the idea not to limit it to one implementation. 
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In this example, the step 1 shown in Figure 8A, includes taking the photo on the mobile 
camera phone. Step 2 varies with each device, and it might be 'share* or *send* the photo 
from the mobile phone. Step 3 includes prompting the user to enter the destination email 
address. 

5 As noted above, even though this looks like a standard email address, the recipient does not 
actually receive an email in his or her Yahool Mail inbox. Rather, email is the transport 
mechanism and the emails are sent to Yahoo! Photos upload e-mail servers. Each photo 
message is identified with a particular Yahoo! Photos user account. This email address takes 
the form: Yahoo !E)@photos. Yahoo.com . Suppose that the destination Yahoo! ID is JSmith, 
1 0 then the email is CTo:") ismith@photos.Yahoo.com and the Yahoo I Photos upload e-mail 
server identifies this email with JSmith*s Yahoo! Photos account. In a different version, in 
addition to the photo, this email includes the photo name and destination album (JSmith's 
album) on the Yahoo! Photos Server. 

The email transport protocol in this instance is SMTP (simple mail transfer protocol defined 
15 in STD 10, RFC 821), which is commonly used to transfer electronic mail between 
computers. Among others, MMS and SMS protocols are possible alternatives. SMTP is 
typically a server to server protocol, so other protocols are used to access the messages. The 
SMTP dialog usually happens in the background under the control of the message transfer 
agent, e.g. sendmail, but it is possible to interact with an SMTP server using telnet to connect 
20 to the normal SMTP port. The local host (of the carrier) is typically identified by the IP 
address of its gateway. 

Once the destmation is known, the email is sent from the mobile phone to the server, i.e., 
Yahoo! Photos upload email server 18 (note that Yahoo! email and Yahoo! Photos are shown 
as being handled by the same server, but other configurations are possible). On its way to the 
25 server, the photo email is transported via the carrier network (e.g., Sprint PCS network) 12 
and is first transmitted to carrier's SMTP Server. The carrier SMTP server then forwards the 
messages to Yahoo! Photos upload SMTP servers. 

At the carrier's server (not specifically shown but represented by the carrier network 12), the 
email sender's mobile phone number (mobile ID number) is identified and combined with the 
30 carrier's domain information to form the email source ("From:") EP address, say, 408-555- 
SS5@messaging.sprintpcs.com . As soon as the photo message arrives at Yahoo! network, the 
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IP address of SMTP server that originates the photo message is checked for validity at the 
security layer (in step 1 of the destination side). An invalid carrier domain renders the IP 
address invalid and on such detemiination the security layer blocks the email fix>m 
proceeding further, where the Yahoo 1 Photos upload email server does not receive the 
S blocked email. An IP address that is deemed valid by the security layer IS is allowed to 
proceed to the Yahoo! Photos upload e-mail server 18. 

After the photo message arrives at the Yahoo! Photos upload e-mail server, the Yahoo! ID, 
i.e., JSmith, is extracted from tiie destination email address, i.e., jsmith@photos.Yahoo.com 
(in step 2 of the destination side). The phone number and the earner are extracted from the 

1 0 source address of the photo message. The phone number and carrier info are then used to 

check if the extracted destination Yahoo! ID has given permission to upload to the destination 
user's Yahoo! Photos account. As an example, let us assume that the extracted sender's 
mobile phone number is 408-555-555 and the carrier is SprintPCS. In addition, the extracted 
destination Yahoo! ID is JSmith. The server will then check the database to see if the phone 

15 number and carrier is in JSmith' s approved upload list. This is to verify that JSmith 

authorized the sender (i.e., mobile phone 408-555-555 with SprintPCS) to upload photos to 
JSmith's Yahoo! Photos account. Upon determining that the upload is permitted, the server 
uploads the photo to JSmith's Yahoo! Photos account. Otherwise, an unauthorized upload is 
discarded. In a different version, the unauthorized email is redirected to a standard email 

20 address. 

Having established ttie roles of the system components in the upload security scheme we 
move to the process diagram in Figure 8B. Again, one way upload security can be established 
is by access control using mobile phone nimoibers. For each user, the scheme requires the user 
to enter the approved mobile phone numbers. When an upload message is sent to the Yahoo! 
25 Photos upload e-mail server, the mobile phone number and carrier domain information are 
part of the "From:" IP address that accompanies the upload message. The phone number and 
carrier domain information are retrieved from the upload email message 802 and the carrier 
domain information and mobile phone number are checked to determine if the upload is 
authorized 806, 808, 810. 

30 Approval of the carrier takes place at the security layer even before the message gets to the 
Yahoo! Photos upload e-mail servers. A network level filter is introduced in order to provide 
access control (using a list of SMTP gateways) based on IP addresses. This filter blocks all 
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messages that are not firom a global access control list (ACL) 804, 806. In this instance, the 
global access control list is built by collecting from Yahoo! 's carrier partners IP addresses of 
SMTP gateways used for e-mail photo sharing purpose. The messages sent from carriers that 
are not in the access control list are blocked at the network level 806. This way, the Yahoo! 
5 Photos upload email server receives only messages for uploading photos that are from 
carriers listed in the global ACL. Moreover, the ACL improves efficiency in that it insures 
that the server need not process email messages from unauthorized carriers or spanuners and 
can focus its resources on processing emails from authorized carriers. 

Once the server receives the email, the (sender's) phone number and the carrier are checked 
10 against the pre-authorized list in the database 22 which is associated with the destination user. 
If the pair of phone number and carrier exists in this list 808, the photo will be retrieved and 
inserted into the user's Yahoo! Photos account 810. Otherwise the message will be discarded. 
This insures that only photos sent from the mobile phones that are authorized are iaserted into 
user's photos account. 

15 Finally, we turn to the flow diagram in Figure 8C for an overview of the upload rules. An 
email message sent to idoe@photos.vahoo.com 902 is first filtered at the network seciirity 
level 904. If it filters through the network security the message is routed to the Yahoo! Photos 
upload email server for frirther verification which involved one or more steps. In one 
variation of this scheme, only premium users (who are Yahoo! users, have logged in before 

20 and have purchased the Yahoo! Photos application) who have a right to selectively grant 
access to upload photos can upload their email photo messages 906. Otherwise, the message 
is discarded 930 or, optionally, redirected to a standard Yahoo! Mail address 
(jdoe@vahoo.com) of the (destination) user 912. The recipient can proceed to accept the 
photo and manually upload and store select photos 914, 916, 918, 920. Then, whether or not 

25 the premium user feature is present and is turned ON/OFF, the next step 908 involves 
determining if the sender's mobile phone number is on the user's approved Ust and is 
authorized to upload the photo. If the sender's phone number is not on the approved list the 
email message is discarded 930 or, optionally, re-directed to the destination user's standard 
email address 912. 

30 One limitation the user can impose is the number of uploads permitted in a period of time 
(e.g., day, hour or week). This limitation is set during user registration. Accordingly, the next 
step involves determining if the limit number, x, of permitted uploads is reached or not 910. 
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If not, the upload can proceed, otherwise the message is discarded 930 or, optionally, 
redirected to the user's standard email address 912. 

In one variation, a SMS message with embedded URL can be pushed to sender's mobile 
device if the sender is the owner of Yahoo! Photos account. The sender can then click the link 
5 and authorize uploading via a WAP session. 

Once a photo is uploaded, the photo is stored in the user's account on the server 928. If, the 
user's album is specifically identified, the photo is directed to such album. If the photo name 
is identified the specific photo is uploaded and stored. It is anticipated that future photo 
programs will be designed with the capability to identify the photo by name and to identify 
10 the specific albimi to which the photo is directed. 

In view of the above, the upload security scheme improves efficiency and controls access to 
user accounts. With the ever growing problem of rogue broadcasts, spasm and parasites, the 
controlled access of upload security helps block unwanted uploads. 

Implementation Details 

1 5 Additional implementation details associated with the foregoing description are provided 
below. These implementation details include an initial list of devices, soft key mapping, 
labels, global elements and screen flows tables for the online albums and mobile albums. 
These details are described in the following pages. 

Possible Mobile Devices 

20 The visual and interaction design as described herein should acconamodate various types of 
mobile devices, including, for example, those listed in the table below. 



Vendor 


Model 


Usable pdsl dimensions 


Audiovox 


8450 


128x112 


Samsung 


A660 


128 X 146 (without Soft key) 128 x 131 (with Soft key: 15) 


Sanyo 


RL2000(7200) 


120 X 1 12 (include soft key) 


Sanyo 


RL2500 (5400) 


132 (W) X 160 (H) including Soft key 


Sanyo 


5500 


132(w) X 1 60(h) including Soft key 


Sony Ericsson 


T608 


128 X 114 pixels 


Toshiba 


9950 


261x240 


Hitachi 


SH-P300 


120wxl30h 


LG 


5350 


120x96 


Samsung 


A500 


128 X 146 (wifliout Soft key) 128x131 (with Soft key: 15) 


Samsung 


N400 


128 X 1 14 (wifliout Soft key) 128x102 (wifli Soft key: 12) 
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Vendor 


Model 


USABLE PDCEL DIMENSIONS 


Samsung 


A600 


128 X 146 (without Soft key) 128 x 131 (wilii Soft key: 15) 


Samsung 


VGA1000(A620) 


128 X 146 (without Soft key) 128 x 131 (with Soft key:15 ) 


Sanyo 


4900 


120 X 1 12 includes Soft key 


Sanyo 


5300 


132x160 (includes soft key) 


Sanyo 


8100 


128 X 120 (with soft key) 120 x 1 12 (without Soft key) 



SOFT KEY Mapping 



For the purpose of this invention, the following keys are available on the mobile devices: Up; 
Down; Left; Right; Select/OK; Left Soft key; Right Soft key; and Back. If a device does not 
have an obvious select key, it is assumed that the MEDP (mobile information device profile) 
5 implementation will automatically provide a select option at one of the soft keys or in one of 
the soft key menus. 



Key Mapping 


Up 


Scrolls the cursor up, or selects the previous item in a list. 


Down 


Scrolls the cursor down, or selects the next item in a list. 


Left 


Scrolls the cursor left if possible. 


Right 


Scrolls the cursor right if possible. 


Select 


LINK OR BUTTON: Go to appropriate screen 
EXCLUSIVE LIST (Radio buttons): Selects the radio button. 
MULTIPLE LIST (Checkboxes): Checks and un-checks the checkboxes. 
TEXTBOX: Takes the user to the text editor 
TEXT STRING: Does nothing 


Two Soft keys 


Soft key functionality varies greatly among devices. The ordering and 

positioning of options can't be controlled with any degree of accuracy; the 

order shown indicates only the relative importance of the options. 

In the examples presented herein, options are assigned a type (BACK, EXIT, 

ITEM) 

The following layout is preferred: 
Item 1 : primary soft key • 

Item 2: If no others are present, secondary soft key should have item 2 as its 
label. If additional items are available they should be listed in priority order in 
the menu, which is accessed via the secondary soft key. 

Primary soft key should have the same function as the 'EnterV'OK' key 


Back 


'Back' button links back to previous screen. 

Does NOT link one level up in the navigation tree, unless that is the previous 
screen. 

Does not link back to confirmation or error popups. 
When technical constraints exist, data previously entered into fields may not 
be shown when user navigates back to a page. However, actual 
implementations may differ based on the technical constraints. 


Default 
Selection 


In general, the first item on a page is pre-selected (default item) unless the user 
has performed some action, 1^ viewing or renaming an image. 
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Misc. keys If arrow buttons on the side of the phone are available fhey should scroll down 
an entire page in a list or thumbnail screen. 

Image names should appear bold/strong when displayed on an instructional 
screen, e.g. 2,1.4. Normal text should be used for lists of images. 

In this document any underlined item is a link. Actual presentation of links, 
whether underlined or other, is determined by the device. 

Soft key & Menu Labels 

In a representative implementation, labels that may appear on a soft key are restricted to 7 
characters. Menu-only items are restricted to 14 characters. 



Common Labels 



OK 


Performs the default action for a screen or for a selected item. Moves the user 
forward in a task, (e.g., opens an album or photo.) 


Cancel 


Used in addition to "Back" when an action was initiated and can be cancelled. 
Cancel usually performs same action as back, but is displayed to increase user 
confidence that the action was cancelled. 


Edit 


When possible, "Edit" links to a textbox editing screen. 


Open 


Opens a folder, message, file, etc. Should not be used for links not associated 
with files, folders, etc. 


Back 


"Back" label should be used only for the Back fimction described above. If 
possible, Back should always map only to the device back button. 


Home 


Links to the home screen of the MIDlet. 



5 Global Elements 



Confirmation Popup 

One type of global elements, presented as "Confirm Popup" screens, are used for displaying a 
confirmation to the user. The confirmation popup screens contain simple text such as "Done" 
or "Saved", and they disappears automatically after a short time. 

10 In Progress Screen 

The "in progress" screen informs the user that the application is waiting for a response from 
the server or is processing a request. Each device has a default screen with text and a moving 
graphic, and, alternatively, it is replaced with a Yahoo! Canvas screen. 
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Screen Flows: Online Albums 

As described above, the online albmn pages are made available to the user in forward and 
backwards traversal; each page having default selection items associated with it. The forward 
traversal starts, of course, with the home page (2.0). The following tables outline for each 
5 page separately the default selection items available in that page for screen flows. 



2.0 J2ME Client Home 


Default 
Selection 


Mobile Album 


Actions 


* Label 


Function 


Pref. 
Location 


Type 


Priority 




Left soft key opens selected 
page. 

Numbers 1, 2, 3, 4 also open 


Primary 
Soft key, 
OK Button 


ITEM 


1 




Enter/OK 


Open 


Up Arrow 


Select previous item 


Down 
Arrow 


Select next item 


Left 
Arrow 


Select next item 


Right 
Arrow 


Select previous item 


Conunents 


Descriptive text and/or graphics will be added to this screen. Icons may be 

used in place of text links. 

"Sign Out" appears only when user is signed in. 



I.O Sign In 


Default 
Selection 


ID Field, 


Actions 


Label 


Function 


Pref. 
Location 


Type 


Priority 


"Edit "~ 


Opens selected textbox 
for editing 


Primary 
Soft key, 
OK Button 


EDIT 


1 


Signin 
iBack 


Submits Form 


Secondary 
Soft key 


OK 


1 


2.0 J2ME Client Home Back 


BACK 1 1 




Up Arrow 


Jumps up. 


Down 
Arrow 


Jumps down. 


Left Arrow 




Right 
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Arrow 




Comments 


Cache as much as legally & teclmically possible. 



2.1 My Online Albums 


Default 
Selection 


First Album, or last selected album in current session. 


Primaiy 
Soft key 


Open. Same as Enter. 


Actions 


\ Label 


Fimction 


Pref. 
Location 


Type 


Priority 






!"(5en 

i 

i 
i 


Opens selected album to 
last-used view- 2.1.1 or 
2.1.2. List is default 


Primary 
Soft key, 
OK Button 


ITEM 


1 






i 

> 


If album contains no 
images, opens 2.1.6 Photos 
List Empty. 




• 








I Back~ 


Previous screen. 


Back 


BACK 


■> 


















Up Arrow 


Jumps to previous item in list. If top item is selected, does nothing. 


Down 
Arrow 


Jumps to next item in list If last item is selected, does nothing. 


Left Arrow 




Right 
Arrow 
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2.1.1 Photos Thumbs 



Default 
Selection 


One thumbnail is always selected. Selection is indicated by 2 pixel black border. 
When scrolling to a page either (1) or (4) is selected. 

When returning from a list view, fiiU-screen view, or action screen the last selected 
image is selected. 


Actions 




T7nnr*'HriTi 


X rex. 
Location 


lype 


IT ixurxiy 








NOTE: pressing 1,2,3, or 
currently in that position. 


x^nmary 
Soft key, 




1 
X 






j /\uu lU 

Mobile 

rviuuiii 


album and opens 2. 1 .7 


lYICllU 


TTFM 


9 






Screen 
Saver 


Links to 2.1.4 Save as 

Screensaver ' 


Menu 


ITEM 


~3 






Email 
Photo 


Links to 2.1.5 Share as 
Email 


Menu 


ITEM 


3 






"Photo"" ^ 
List 


Links to 2.1.2 Photo List 


Menu 


SCREEN 


1 






Online 
Albums 


Links to 2.1 My Online 
Albums 


Menu 


SCREEN 








Home 


Links to 2.0 J2ME Client 
Home 


Menu 


SCREEN 


3 






Back 


Previous screen 


Back 
button 


BACK 


1 




Tin Airnw 


When (3) or (4) is selected, jumps up to (1) or (2), 
When (1) or (2), moves up one row. 


Down 
Arrow 


When (1) or (2) is selected, jumps down to (3) or (4). 
When (3) or (4), moves down one row. 


Left Arrow 


Cycle through all thumbs on the screen, (4)-(l) then to the row above. Rows are added 
one at a time, so the top row shifts down when a new row is loaded. 


Right 
Arrow 


Cycle through all thumbs on the screen, (l)-(4) then to the row below. Rows are added 
one at a time, so the bottom row shifts up when a new row is loaded. 


Comments 


List loops back to beginning when user reaches last image. When looping to the 




begiiming, the full screen refreshes with 2 rows of images. 








Each photo is surrounded by 2 pixels of white space. The selected photo has a 2 pixel 




black border. 
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2. 1 .2 Plioto List 



Default 
Selection 



One item is always selected. 

When returning from a thumbnail view, full-screen view, or action 
screen the last selected image is selected. 

After deletmg, the image in the spot that contained the deleted image is 
selected. 



Actions 


Label 


Function 


Pref. 

Location 


Type 


Priority \ 


Open 


Opens 2.1.3 Online 
Photo 


Primary 
Soft key, 
OK 

Button 


ITEM 


1 


Add to 
Mobile 

^lbum_ 

Screen 
Saver 


Saves image to 
mobile album 

"Links to 2T4 Save' 
as Screensaver ' 


Menu 




"2 


Menu 


ITEM 


3 1 


Email 
Photo 


Links to 2.1.5 Share 

as iEmail 


Menu 


ITEM 1 3 


Thumbnails 


Links to 2.1.1 Photo 
Thumbs 


Menu 


scREeq 1 i ~ 

_ L 


Online 
1 Albums 
Home 


Lmksto2.1 My 

Oidme Album 

Liriks to i^O J2^^ 
Client Home 


Menu 
Menu 


SCREEN 
"SCREK^ 


2 ] 
~3 

*1 1 


Back 1 Previous screen 


Back 


BACK 




Up Arrow 


Jumps to previous item in list. If top item is selected, does nothing. 


Down 

Arrow 


Jumps to next item in list If last item is selected, does nothing. 


Left Arrow 




Right 
Arrow 




Comments 


File extensions are displayed. 

Items are displayed in order specified by the Yahoo! Photos system. 
User cannot r^ame, delete, or move photos. 
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2.1.3 Online Photo 



Default 
Selection 



Actions 


{ Label 


Function 


Pref. 
Location 


Type 


Priority 


! - 




Done 


Links to 2.1.1 or 2,1.2 


Primary 
Soft key 


SREEN 


1 






Add to 
Mobile 


Saves image to mobile 
album 


Menu 


ITEM 


"2 






Album 














Screen 


Links to 2.L4 Save as 


Menu 


freM 


'3 






Saver 


Screensaver 












Email 


Links to 2. 1 .5 Share as 


Menu 


frEM~ 


"3 ■ 






Photo 


Email 












biiline 
Albums 


LhikstoilMy 
Oidine AJbums ^ 


Menu 


"soteen" 


2 

3-- 






1 Home 


Links to 2.0 J2ME 
Client Home 


Menu 


screen'" 






Back _ * 


Previous screen 


Back 


JACK _ 


\ 


















Up Arrow 




Down Arrow 




Left Arrow 


Jumps to previous image in gallery. 


Right Arrow 


Jumps to next image in gallery. 


Comments 


Image should be as large as possible on 


any particular screen. 







2. 1 .4 Save as Screensaver 


Default Selection 


Text entry fie 


[d 


Actions 


Label 


Function ! Pref. | Type 

; Location 


Priority | 


OK 


Initiates PCS Vision 
download process. 


Primary 
Soft key, 
OK Button 


SCREEN 


1 


Cancel 


Cancels operation and 
returns to previous 
screen 


Second 
Soft key 


SCREEN 




Back 


Previous screen 


Back 


iBACK 


1 




Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 
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2.1.5 Share as Email 


Default Selection 


Text entry field 


Actions 




Label 


Function 


Pref. 

Location 


Type 


Priority 








Send 

■ 


Send. Sends email to 
recipients and user 
with link to image 

on well 

i^onnrmauon pops 
up for a moment, 
then user is returned 
TO z.i.Xy z.i.z, or 

If email address was 
not formed correctly 


Secondary 
Soft key 


ITEM 












an error appears. 














EdiMck/OK 


Opens textbox for 
editing, toggles state 
of checkbox, or 


Primary 
Soft key, 
OK Button 












sends. 














^iSack 


Previous screen j Back 


"rack" 






















Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 





2.1.6 Photo Lis 


t Empty 




Default 
Selection 




Actions 


Label 


Function 


Pref. i Type Priority 
Location ! 






JLl MjMOnline Albmns 


Back : BACK J 1 J 


Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 


Displayed for a moment, then automatically links back to 2.1 My Online 
Albums 



Screen Flows: Mobile Album 



As with the online album, tiiie mobile album pages are made available to the user in forward 
and backwards traversal; each page having default selection items associated with it Here 
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again, the forward traversal starts, of course, with the home page (2.0). The following tables 
outline for each page separately the default selection items available in that page for screen 
flows. 



3.1.1 Mobile Photo List 



Default Selection 


One item is always selected. 

When returning from a thumbnail view, full<-screen view, or action 
screen the last selected image is selected. 

After deleting, the image in the spot that contained the deleted image is 
selected. 


Actions 


Label 


Function 


Pref 
Location 


Type 


Priority 






Open 


— — , — 
Opens selected photo 

in 3.1.3 Mobile 

Photo 


Primary 
Soft key, 
OK 
Button 


ITEM 


1 






! Slideshow 


Links to 3.3 Mobile 
Slideshow, starting 
show with current 
photo 


Menu 


TiEM ~" 


2 






Move 


Links to 3.2.1 Move 


Menu 


ITEM 


._ 






Delete 


Links to 3.2.4 Delete 


Menu 


ITEM ' 


4 






Thumbnails 


Links to 3.1.1 
Mobile- Photo 


Menu 


SCREEN 


1 






1 

j Home 


Thumbs 












LkSis to 2.0 J2I^ 


Menu 


SCRiiN 


2 








QientHome 












Back 


Previous screen 


Back j BACK 


1 .TZ 


















Up Arrow 


Jumps to previous item in list. If top item is selected, does nothing. 


Down Arrow 


Jumps to previous item in list. If last item is selected, does nothing. 


Left Arrow 




Right Arrow 




Comments 


File extensions are not displayed. 



3.1.2 Mobile Photo Thumbs 



De&ult Selection 



One thumbnail is always selected. Selection is indicated by 2 pixel 
border. 

When returning from a list view, full-screen view, or action screen the 
last selected image is selected. 

After deleting, the image in the spot that contained the deleted image is 
selected. 

After Moving, the last moved image is selected. 
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Actions 



Ubel 


Function 


Pref. 
Location 


Type 1 


Priority ' 




Onens 3 1.3 Mobile 
Photo 

NOTE: pressing 
1,2,3, or 4 opens the 
nhoto currentlv in 
that position. 


Primary 
Soft key, 
OK 
Button 


ITEM 


1 


Slideshow 


Links to 3.3 Mobile 
Slideshow, starting 
show with current 
photo 


Menu 


ITEM 


2 

■ 


Move 


Links to 3.2.1 Move 


Menu 


ITEM 


4 

^* 


Delete^ ,1 


Links to 3.2.4 Delete 


Menu 


ITEM 


4 

T 


Photo List 


Links to 3.1.1 
Mobile- Photo List 


Menu 




Home 


Links to 2.0 J2ME 
Client Home 


Menu 


"SCREEN 




Back 


! Previous screen 


Back 







Up Arrow 



When (3) or (4) is selected, jumps up to (1) or (2). 
When (1) or (2), moves up one row. 



Down Arrow 



When (1) or (2) is selected, jumps down to (3) or (4). 
When (3) or (4), moves down one row. 



Left Arrow 



Cycle through all thumbs on the screen, (4)-(l) then to the row above. 
Rows are added one at a time, so the top row shifts down when a new 
row is loaded. 



Right Arrow 



Cycle through all thumbs on the screen, (l)-(4) then to the row below. 
Rows are added one at a time, so the bottom row shifts up when a new 
row is loaded. 



Comments 



List loops back to begiiming when user reaches last image. When 
looping to the begiiming, the ftiU screen refreshes all 4 images. 

When an image is deleted all other images move to fill the empty space 

Each photo is surrounded by 2 pixels of white space. The selected photo 
has a 2 pixel border. 
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3.1.3 Mobile Photo 



Default Selection 




Actions 


1 Label 


Function 


Pref. 
Location 


Type 


Priority 






j Done 


Album. Links to most 
recent view of album 
-3 11 or 3.1.2 -with 
most recently viewed 
image selected. 


Primary 
Soft kev 
OK 
Button 


ITEM 


1 






Slideshow 


Links to 3.3 Mobile 
Slideshow, starting 
show with current 
photo 


Menu 


ITEM 


2 






JVloye 


Links to 3.2.1 Move 


Menu 


ITEM 


4 






Delete 


Links to 3.2.4 Delete 


Menu 


itEM" 


4 






j Home 
! Back 


Links to 2.0 J2ME 
Client Home 
Previous screen^ 


Menu 
Back 


SCREEN 

< 

i BACK 


2 
1 




Up Arrow 




Down Arrow 




Left Arrow 


Jumps to previous image in gallery. When first image is reached, loops 
to end. 


Right Arrow 


Jumps to next image in gallery. When last image is reached, loops to 
beginning. 


Comments 


Image should be as large as possible on any particular screen . 



3.1.4 Mobile Album Empty 


Default 
Selection 


My Online Albums 


Actions 


Label 
OK 

Back 


Function 


Pref. 
Location 


Type 1 Priority 


Previous screen 


Primary 
Soft key, 
OK Button 
Bick 


ITEM ~\i ; 

i 

i i 

BACK J 1 ' 1 


Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 
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3.1.4.1 Mobile-/ 


\boiit 




Default 
Selection 


My Online Albums 


Actions 




Label 


Function 


Pref. 
Location 


Type 


Priority j 

i 


OK 


Links to 2.1 My 
Online Albums 


Primaiy 
Soft key, 
OK Button 


ITEM 


1 


Back 


Previous screen 


Back 


BACK 


1 




Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 





3.1.4.2 Mobile- F 


Restore Album 


Info 




Default 
Selection 


My Online Albums 


Actions 


Label 


Function 


Pref. 
Location 


Type 


Priority 


OK 

1 Back' 


Links to 3.1.4.2.1 
Restore Mobile 
Album 

Previous screen 


Primary 
Soft key, 
OK Button 
Back 


ITEM 
BACK 


1 


Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 
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3.1.4.2.1 Restore Mobile Album 


Default 
Selection 




Actions 


Label | Function ; Pref. 

j Location 


Type 


Priority 


Pick 1 Toggles state of i Primary 
i i checkbox ; Soft key, 
i ; OK Button 


ITEM 


1 


Save 1 Downloads all . Secondary 
j selected images to ] Soft key 
;MobUe Album i 

Back j Previous screen j Back 


SCREEN 


1 

1 " 


Up Arrow 


Jumps to previous item in list. If top item is selected, does nothing. 


Down Arrow 


Jumps to next item in list. If last item is selected, does nothing. 


Left Arrow 


May toggle state of checkbox. 


Right Arrow 


May toggle state of checkbox. 


Conunents 


This screen lists a close approximation of fhe items downloaded to a 
particular phone using a particular account. When the user has selected 
the photos he wishes to restore and presses "Save" all the images are 
downloaded to the mobile album. If the Mobile Album already has 
photos in it, restored photos are added at the bottom of the list. 



3.2.1 Move 


Default 

Selection 


Selected Photo 


Actions 


Label 
bone 


Function 

• 

Drops photo in current 
location. Links to 
3.2.1 with moved 
photo selected. 


Pref 
Location 
Primary 
Soft key, 
OK Button 


Type 
OK 


Priority 
1 


Back 


Links to previous page 
(before move 
command was 
selected) and cancels 


Back 
button 


BACK 


1 




Up Arrow 


When (3) or (4) is selected, swaps with (1) or (2). 
When (1) or (2) is selected, moves up one row. 


Down Arrow 


When (1) or (2) is selected, swaps with (3) or (4). 
When (3) or (4) is selected, moves down one row. 


Left Arrow 


When (1) is selected, jimips to previous screen and swaps with (4) on 
that screen. 

When (2) is selected, swaps with (1). 
When (3) is selected, swaps with (2). 
When (4) is selected, swaps with (3). 
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When first image is selected, jumps to last image. 


Right Arrow 


When (4) is selected, jumps to previous screen and swaps with (1) on 
that screen. 

When (3) is selected, swaps with (2). 
When (2) is selected, swaps with (3). 
When (3) is selected, swaps with (4). 
When final image is selected, jumps to first image. 


Comments 


Small arrow images overlaid on the image being moved. 



3.2.4 Delete 


Default 
Selection 




Actions 


j Label \ Function 


Pref. 1 Type 
Location 


Priority 1 


1 Delete 

! 


Deletes photo and returns 
user to 3.1.1 or 3.1,2 (last 
used) with image in 
position of deleted image 
selected. 


Primary 
Soft key 


OK 


T' 


Cancel 
Back 


Cancels deletion and 
hnks topre^aous screen 
Cancels deletipn and 


Secondary 
Softke3[_ 
"Back"^ " 


BACK 
JACK 


2 
l" 


Up Arrow 




Down Arrow 




Left Arrow 




Right Arrow 




Comments 





3.2.4 Delete All 


Default 
















Selection 
















Actions 




Label 


Function 


Pref. 
Location 


Type 


Priority 








Delete 


Deletes all photos and 
returns user to 3.1.4 
Mobile Album Empty. 


Primary 
Soft key 


OK 


1 








Cancel 


Cancels deletion and 


Secondary 


BACK^^ 


2 








Back 


links to previous screen 
Cancels deletion and 


Soft key 
Back" 


BACK 






















Up Arrow 




Down Arrow 




Left Arrow 
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Right Arrow 




Comments 





3.3 Mobile Slicleshow 


Default 
Selection 




Actions 


1 Label 


Function 


Pref. 
Location 


Type 


Priority j 


Stop 
Pause 


Ends slideshow and 
returns user to 3. 1 . 1 or 
3.1.2 (last used). 


Primary 
Soft key 


OK 


1 


Pauses slideshow and 
switches first Action to 
"Play." Pressing again 
re-starts slideshow 
from the current image. 


Menu 


SCREEN 

'screen 


1 


Slow 


Switches speed to 
Slow. 


Menu 


Normal 

1 . 


Switches speed to 
Normal 


Menu 


SCREEN 


3 




Up Arrow 




Down Arrow 




Left Arrow 


Jumps to previous image. Slideshow continues to play at same speed. 


Right Arrow 


Jumps to next image. Slideshow continues to play at same speed. 


Comments 


Image should be as large as possible on any particular screen. 
If possible, backlight should remain on xmtil slideshow is stopped. 
Screen should not refresh while Actions menu is open. 
The screen has no header. 



Although the present invention has been described in accordance with the embodiments 
shown, variations to the embodiments would be apparent to those skilled in the art and those 
variations would be within the scope and spirit of flie present invention. Accordingly, it is in 
5 tended that the specification and embodiments shown be considered exemplary only, with a 
true scope of the invention being indicated by the following claims and equivalents. 
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What is claimed is: 

1 . A method for providing upload security, comprising: 

identifying a mobile device used by a sender of an upload message destined to a user, 
5 in response to a server receiving the upload message from the mobile device via a network; 
accessing, in the server, opt-in parameters predetermined by the user, the opt-in 
parameters including the identity of mobile devices that are authorized by the user to upload 
data to an account on the server associated with the user; 

determining if the identity of the mobile device used by the sender is included m the 
1 0 opt-in parameters; and 

if so, allowing upload of content from the upload message to the account associated 
with the user, otherwise blocking the upload. 

2. The method of claim 1 , wherein flie mobile device is a wireless device. 

15 

3. The method as in claim 1, wherein the content is photograph data, 

4. The method as in claim 1, wherein the network includes a wireless carrier network 
and wherein the method further comprises providing security screening of the upload 

20 message before it reaches the server based on the identity of the wireless carrier network. 

5. The method as in claim 4, wherein the identity of the wireless carrier network 
includes an internet protocol (IP) address. 

* 

25 6. The method as in claim 5, wherein tiie IP address is combined with the identity of the 
mobile device in the upload message, and wherein the method fiirther includes parsing the 
upload message to obtain the IP address and the identity of the mobile device. 

7. The method as in claim 4, wherein the mobile device is a wireless phone and the 
30 identity of the mobile device is a phone number assigned to it by the bearer of the wireless 
carrier network. 
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8. The method as in claim 1, wherein the sender uses email as a transport mechanism for 
the upload message, and wherein the sender identifies to the server the user for whom the 
upload message is destined by indicating the user's email address. 

5 9. The method as in claim 8, wherein the server correlates the user's email address with 
the account associated with tiie user. 

1 0. The method as in claim 2, further comprising determining if the user has ever logged 
in to tiie server and is allowed to selectively grant access for uploads to the account 

1 0 associated with the user. 

1 1 . The method as in claim 1, wherein the opt-in parameters further include a limit 
number of upload messages which are authorized by the user during a given period, and 
wherein the method further comprises determining if the limit number for the sender is 

1 S . exceeded by the upload message such that it is not permitted by the user and thus the upload 
is blocked. 

12. The method of claim 1, further comprising, if the upload is blocked, rerouting the 
upload message to a standard email address of the user. 

20 

1 3 . The method of claim 1 , further comprising establishing a communication link from 
the sender's mobile device to the user in order to prompt the user to indicate, on the user's 
mobile device or personal computer, whether the user wants to add the sender's mobile 
device identity to the opt-in parameters. 

25 

14. A computer readable medium embodying a computer program with program code for 
providing upload security, comprising: 

program code for identifying a mobile device used by fee sender of an upload 
message, in response to a server receiving from a mobile device via a network fee upload 
30 message which is destined to a user; 

program code for accessing in fee server opt-in parameters predetermined by fee user, 
fee opt-in parameters including fee identity of mobile devices that are aufeorized by fee user 
to upload data to an account on fee server associated wife fee user; 
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program code for determining if ttie identity of the mobile device used by the sender 
is included in the opt-in parameters; and 

program code for authorizing upload of content from the upload message to the 
account associated with the user if the identity of Ihe mobile device is included, otherwise 
5 blocking the upload. 

15. The computer readable medium of claim 14, wherein the computer program is divided 
into parts, one part being at a server-side, a second part being at a client side and a third part 
being at a networking service, 

10 

1 6. The computer readable medium as in claim 14, wherein the content is photograph data 
and the mobile device is a wireless camera phone. 

17. The computer readable medium as in claim 15, wherein the network includes a 

1 5 wureless carrier network and wherein the computer program further comprises program code 
at the networkmg service for providing security screening of the upload message before it 
reaches the server based on the identity of the wireless carrier network. 

1 8. The computer readable medium as in claim 1 7, wherein the identity of the wireless 
20 carrier network includes an internet protocol (IP) address. 

1 9. The computer readable medium as in claim 1 8, wherein the IP address is combined 
with the identity of the mobile device in the upload message, and wherein the computer 
program further includes program code for parsing the upload message to obtain the IP 

25 address and the identity of the mobile device. 

20. , The computer readable medium as in claim 17, wherein the mobile device is a 
wireless phone and the identity of the mobile device is a phone number assigned to it by the 
bearer of the wireless carrier network. 

30 

21 . The computer readable medium as in claim 14, wherein the sender uses email as a 
transport mechanism for the upload message, and wherein computer readable medium further 
comprises program code for prompting the sender to identify to the server the user for whom 
the upload message is destined by indicating the user's email address. 
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22. The computer readable medium as in claim 2 1 » wherein the computer readable 
medium further comprises program code at the server for correlating the user's email address 
with the account associated with the user. 

5 

23 . The computer readable medium as in claim 22, wherein the computer readable 
medium fiirfher comprises program code at the server for determining if the user has ever 
logged in to the server and is allowed to selectively grant access for uploads to the account 
associated with the user. 

10 

24. The computer readable medium as in claim 14, wherein the opt-in parameters forfher 
include a limit number of upload messages which are authorized by the user during a given 
period, and wherein the computer program further comprises program code for determining if 
the limit number for the sender is exceeded by the upload message such that it is not 

1 5 pemiitted by the user and thus the upload is blocked. 

25. The computer readable medium of claim 14, further comprismg program code for 
rerouting the upload message to a standard email address of the user if the upload is blocked. 

20 26. The computer readable medium of claim 14, further comprising program code at the 
mobile device of the sender for establishing a communication link from the sender's mobile 
device to flie user in order to prompt the user to indicate, on the user's mobile device or 
personal computer, whether tiie user wants to add the sender's mobile device identity to the 
opt-in parameters. 

25 

27. The computer readable medium of claim 14, wherein the computer program is a 
mobile photos application. 

28. The computer readable medium of claim 27, wherein the mobile photos application 
30 includes at the mobile device program code for invoking an 'email photo' action, displaymg a 

'share an email' page and showing one or more photos selected by the sender for sharing with 
the user by uploading to the account associated with the user. 
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29. The computer readable medium of claim 27, wherein the mobile photos application 
includes at the mobile device program code for capturing, storing, accessing, scrolling, 
selecting, erasing and restoring photos in a local photos album, and wherein the mobile 
photos application includes at the server program code for storing, accessing, scrolling, 
selecting and erasing photos in an on-line photos albimi at the account associated witii the 
user. 

30. The computer readable medium of claim 27, wherein the mobile photos application 
includes at the mobile device program code for selecting an email address of the user who is 
to receive the upload message from a list of email addresses recently used by the sender, if 
this user's email address is included in the list, and for prompting the sender to enter the 
user's email address if it is not included in the Ust. 

31. . A system for providing upload securiiy, comprising: 

a server with a processor and a memory embodying a server-side program as a portion 
of a computer application; 

a plurality of mobile devices conununicatively linked with the server; 
wherein the server-side program includes program code for causing the processor in 
the server to perform steps, including: 

identifying one of tiie plurality of mobile devices used by a sender of an 
upload message destined to a user, in response to the server receiving from such 
mobile the upload message; 

accessing in the server opt-in parameters predetermined by the user, the opt-in 
parameters including the identity of mobile devices that are authorized by the user to 
upload data to an account on the server associated with the user; 

determining if the identity of the mobile device used by the sender is included 
in the opt-in parameters; and 

authorizing upload of content from the upload message to the account 
associated with the user if the identity is of the mobile device is included, otherwise 
blocking the upload. 

32. The system of claim 3 1, further comprising: 
a gateway; 
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a carrier network interfacing between the plurality of mobile devices as well as 
between each of the plurality of mobile devices and the gateway; and 

a network for interfacing between the gateway and the server so as to allow 
communications, via the gateway, between the plurality of mobile devices and the server. 

5 

33. The system as in claim 32, wherein the plurality of mobile devices are WAP (wireless 
application protocol) enabled, and wherein the gateway is a proxy for the plurality of WAP- 
enabled mobile devices on one hand and for the server on the other hand. 

10 34. The system as in claim 31, wherein the plurality of mobile devices are wireless 

camera phones, wherein the computer application is a mobile photos application, and wherein 
the content is photograph data. 

35. The system as in claim 32, wherein the network includes a networking service with a 
1 5 processor and a memory embodying a network security program portion of the computer 
application with program code for causing the network service processor to provide security 
screening of the upload message before it reaches the server based on the identity of the 
carrier network. 

20 36. The system as in claim 35, wherein the identity of the carrier network includes an 
internet protocol (IP) address. 

37. The system as in claim 36, wherein the IP address is combined with the identity of the 
mobile device in the upload message, and wherein the computer application includes further 

25 program code in the networking service and server-side programs for causing the server and 
network security processors to parse the upload message for obtaining the IP address and the 
identity of the mobile device, respectively. 

38. The system as in claim 32, wherein mobile device used by the sender is a wireless 

30 phone and the identity of this mobile device is a phone number assigned to it by the bearer of 
the wireless carrier network. 



39. The system as in claim 3 1 , further comprising email as a transport mechanism for the 
upload message, wherein each of the plurality of mobile devices includes a processor and a 
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memory embodying a client-side program portion of the computer application with program 
code for causing such mobile device processor to prompt the sender to identify to the server 
the user for whom the upload message is destined by indicating the user's email address. 

5 40. The system as in claim 39, wherein the server-side program includes further program 
code for causing the server processor to correlate the user's email address with the account 
associated with the user. 

41 . The system as in claim 31 , the server-side program includes further program code for 
10 causing the server processor to determine if the user has ever logged in to the server and is 

allowed to selectively grant access for uploads to the account associated with the user. 

42. The ^stem as in claim 3 1 , wherein the opt-in parameters fiirther include a limit 
number of upload messages which are authorized by the user during a given period, and 

1 5 wherein the server-side program includes fiirther program code for determining if the limit 
number for the sender is exceeded by the upload message such that it is not permitted by the 
user and thus the upload is blocked. 

43. The system of claim 35, wherein the computer application includes fiirther program 
20 code in both the server-side and networking security programs for causing Ae networking 

service and server processors, respectively, to reroute the upload message to a standard email 
address of the user if the upload is blocked. 

44. The system of claim 3 1 , wherein each of the plurality of mobile devices includes a 
25 processor and a memory embodying a client-side program portion of the computer 

application with program code for causing such mobile device processor to establish a 
communication link firom the sender's mobile device to the user in order to prompt the user to 
indicate, on the user's mobile device or personal computer, whether the user wants to add the 
sender's mobile device identity to the opt-in parameters. 

30 

45. The system of claim 3 1 , wherein the computer application is a mobile photos 
application with client-side and server-side portions, wherein each of the plurality of mobile 
devices includes a processor and a memory embodying the client-side program portion of the 
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mobile photos application and program with program code for causing such mobile device 
processor to download the client-side program from the server. 

46. . The system of claim 45, wherein the client-side program of the mobile photos 

S application includes program code for causing such mobile device processor to invoke an 
'email photo' action, display a 'share an email' page and show one or more photos selected 
by the sender for sharing with the user by uploading to the account associated with the user. 

47. The system of claim 45, wherein the client-side program of the mobile photos 

10 application includes program code for causing such mobile device processor to capture, store, 
access, scroll, select, erase and restore photos in a local photos album, and wherein the 
server-side program of the mobile photos application includes program code for causing the 
server processor to store, access, scroll, select and erase photos in an on-line photos album at 
the account associated with the user. 

15 

48. The system of claim 45, wherein the client-side program of the mobile photos 
application includes program code for causing such mobile device processor to respond to 
selection by tiie sender of an email address of the user to whom the upload message is 
destined from a list of email addresses recentiy used by tiie sender, if this user's email 

20 address is included in the list, and for promptmg the sender to enter the user's email address 
if it is not included in the list. 

49. The system of claim 32, wherein the network includes at least the Internet. 
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FIG. 3 Photos Microslte 
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